I was reading an article the other day and I wanted to qualify something the "reporter" said in the article. He wrote that the majority of malware has the ability to detect it is running in a virtual environment and shut down.